VPN On Demand - 1.2.6

Official client software for OpenVPN Access Server and OpenVPN Cloud.
Post Reply
yankee77
OpenVpn Newbie
Posts: 8
Joined: Tue Oct 06, 2015 6:26 pm

VPN On Demand - 1.2.6

Post by yankee77 » Thu Jan 18, 2018 1:04 pm

Hello all,

There have been some references to a workaround to the current VoD/pkcs issue in 1.2.6. Some people have claimed that have found a workaround by using inline certs and keys. To clarify this for myself and others, has anyone gotten this to work with inline certs and keys IN A MOBILECONFIG FILE? I've gotten it to work on an imported openvpn config autologin profile, but when I transfer the exact same information to an apple mobileconfig, it doens't work (I've already implemented the \n). The VoD feature does not work with openvpn configs, and what I'm really after is getting the on Demand part to work. If anyone has gotten an mobileconfig with inline cert and key and VPN on Demand to work, would they be willing to share any tips and perhaps post a sample mobileconfig? Thanks.
Top
iphoting
OpenVpn Newbie
Posts: 18
Joined: Thu Apr 04, 2013 8:24 am

Re: VPN On Demand - 1.2.6

Post by iphoting » Thu Jan 18, 2018 1:13 pm

What do you mean by doesn’t work? Fail to install the profile into iOS or that the VPN fails to come up according to your OnDemand rules?
Top
yankee77
OpenVpn Newbie
Posts: 8
Joined: Tue Oct 06, 2015 6:26 pm

Re: VPN On Demand - 1.2.6

Post by yankee77 » Thu Jan 18, 2018 1:24 pm

Everything installs fine, the on demand initiates, but it just hangs on "connecting..." There's no detail in the openvpn connect log, so I can't figure out any more specifics.
Top
iphoting
OpenVpn Newbie
Posts: 18
Joined: Thu Apr 04, 2013 8:24 am

Re: VPN On Demand - 1.2.6

Post by iphoting » Thu Jan 18, 2018 1:26 pm

Well, it looks like the mobileconfig and VoD potions are functioning. What do you mean by “autologin” profile?


Sent from my iPad using Tapatalk
Top
CHRISLINDSAY
OpenVpn Newbie
Posts: 9
Joined: Thu Jan 18, 2018 1:25 pm

Re: VPN On Demand - 1.2.6

Post by CHRISLINDSAY » Thu Jan 18, 2018 1:28 pm

Same issue as me however I cant get my profile installed

Using the same certs etc as before I upgraded to 1.2.6

Ive escaped all line breaks with \\n (double slash) as per FAQ's on Openvpn site and followed the other FAQ's

Connection Name should be set to a name that will identity this profile on the device.
Connection Type should be set to Custom SSL.
Identifier should be set to "net.openvpn.connect.app". (on older versions this used to be net.openvpn.OpenVPN-Connect.vpnplugin).
Server can be set to a hostname, or "DEFAULT" to use the hostname(s) from the OpenVPN configuration.
User Authentication should be set to Certificate, and the client certificate+key should be attached as a PKCS#12 file.
VPN On Demand should be enabled and match entries should be defined to instruct iOS under which conditions the VPN profile should be automatically connected.

However it still says in logs that my certs are invalid and then the profile fails to install.

Does anyone have a working template example of how their mobileconfig file looks like now that works, someone preferably that had an embedded p12 cert previously working thats now borken in 1.2.6
Top
iphoting
OpenVpn Newbie
Posts: 18
Joined: Thu Apr 04, 2013 8:24 am

Re: VPN On Demand - 1.2.6

Post by iphoting » Thu Jan 18, 2018 1:57 pm

CHRISLINDSAY wrote: ↑
Thu Jan 18, 2018 1:28 pm
 Does anyone have a working template example of how their mobileconfig file looks like now that works, someone preferably that had an embedded p12 cert previously working thats now borken in 1.2.6
There's an example posted here: https://github.com/iphoting/ovpnmcgen.r ... -357419649

Personally, my mobileconfigs pushed via MDM include both .p12 and inline cert + key components to workaround this issue currently.
Top
CHRISLINDSAY
OpenVpn Newbie
Posts: 9
Joined: Thu Jan 18, 2018 1:25 pm

Re: VPN On Demand - 1.2.6

Post by CHRISLINDSAY » Thu Jan 18, 2018 2:02 pm

So you have the p12 added through apple configurator in certificates and then inline also?

Did you change the identifier, server and user authentication as per FAQ's?

If possible could you send me your example if possible, im tearing my hair out here
Top
iphoting
OpenVpn Newbie
Posts: 18
Joined: Thu Apr 04, 2013 8:24 am

Re: VPN On Demand - 1.2.6

Post by iphoting » Thu Jan 18, 2018 2:14 pm

CHRISLINDSAY wrote: ↑
Thu Jan 18, 2018 2:02 pm
 So you have the p12 added through apple configurator in certificates and then inline also?
Yes. For easier transition when the bug/limitation gets fixed.
CHRISLINDSAY wrote: ↑
Thu Jan 18, 2018 2:02 pm
 Did you change the identifier, server and user authentication as per FAQ's?
Migrating from OpenVPN Connect v1.1.1 to v1.2.x, the changes required are 1) the "identifier" to net.openvpn.connect.app, and 2) additionally including the contents of the .p12 payload inline as cert and key.
CHRISLINDSAY wrote: ↑
Thu Jan 18, 2018 2:02 pm
 If possible could you send me your example if possible, im tearing my hair out here
My configs are generated using my tool. But for your reference, here's a generated generic version:

Code: Select all

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>PayloadDescription</key>
			<string>Configures VPN settings, including authentication.</string>
			<key>PayloadDisplayName</key>
			<string>VPN (vpn.example.com/VoD)</string>
			<key>PayloadIdentifier</key>
			<string>com.example.vpn.example-iphone.vpnconfig</string>
			<key>PayloadOrganization</key>
			<string>vpn.example.com</string>
			<key>PayloadType</key>
			<string>com.apple.vpn.managed</string>
			<key>PayloadUUID</key>
			<string>2D973388-1012-4175-ACA0-C4064A16ABF3</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<key>UserDefinedName</key>
			<string>vpn.example.com/VoD</string>
			<key>VPN</key>
			<dict>
				<key>AuthenticationMethod</key>
				<string>Certificate</string>
				<key>OnDemandEnabled</key>
				<integer>1</integer>
				<key>OnDemandRules</key>
				<array>
					<dict>
						<key>Action</key>
						<string>Disconnect</string>
						<key>InterfaceTypeMatch</key>
						<string>WiFi</string>
						<key>SSIDMatch</key>
						<array>
							<string>home</string>
						</array>
					</dict>
					<dict>
						<key>Action</key>
						<string>Connect</string>
						<key>InterfaceTypeMatch</key>
						<string>WiFi</string>
					</dict>
					<dict>
						<key>Action</key>
						<string>Ignore</string>
						<key>InterfaceTypeMatch</key>
						<string>Cellular</string>
					</dict>
					<dict>
						<key>Action</key>
						<string>Ignore</string>
					</dict>
				</array>
				<key>PayloadCertificateUUID</key>
				<string>75C3B20C-8067-4EE1-8DB2-598F92E26B2B</string>
				<key>RemoteAddress</key>
				<string>DEFAULT</string>
			</dict>
			<key>VPNSubType</key>
			<string>net.openvpn.connect.app</string>
			<key>VPNType</key>
			<string>VPN</string>
			<key>VendorConfig</key>
			<dict>
				<key>ca</key>
				<string>Contents of CA file\nWith newlines\nAnd more newlines\nThat should appear as one line</string>
				<key>cert</key>
				<string>Contents of cert file\nWith newlines\nAnd more newlines\nThat should appear as one line</string>
				<key>client</key>
				<string>NOARGS</string>
				<key>comp-lzo</key>
				<string>NOARGS</string>
				<key>dev</key>
				<string>tun</string>
				<key>key</key>
				<string>Contents of key file\nWith newlines\nAnd more newlines\nThat should appear as one line</string>
				<key>key-direction</key>
				<string>1</string>
				<key>remote</key>
				<string>vpn.example.com 1194 tcp</string>
				<key>remote-cert-tls</key>
				<string>server</string>
				<key>tls-auth</key>
				<string>Contents of TLS-Auth Key file\nWith newlines\nAnd more newlines\nThat should appear as one line</string>
			</dict>
		</dict>
		<dict>
			<key>Password</key>
			<string>password</string>
			<key>PayloadCertificateFileName</key>
			<string>example-iphone.p12</string>
			<key>PayloadContent</key>
			<data>
			cDEyZmlsZSB0aGF0IHNob3VsZCBhcHBlYXIKSW4gYmFzZTY0IGVuY29kaW5n
			IGFzIDxkYXRhLz4=
			</data>
			<key>PayloadDescription</key>
			<string>Provides device authentication (certificate or identity).</string>
			<key>PayloadDisplayName</key>
			<string>example-iphone.p12</string>
			<key>PayloadIdentifier</key>
			<string>com.example.vpn.example-iphone.credential</string>
			<key>PayloadOrganization</key>
			<string>vpn.example.com</string>
			<key>PayloadType</key>
			<string>com.apple.security.pkcs12</string>
			<key>PayloadUUID</key>
			<string>75C3B20C-8067-4EE1-8DB2-598F92E26B2B</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
		</dict>
	</array>
	<key>PayloadDescription</key>
	<string>OpenVPN Configuration Payload for example-iphone@vpn.example.com</string>
	<key>PayloadDisplayName</key>
	<string>vpn.example.com OpenVPN example@iphone</string>
	<key>PayloadIdentifier</key>
	<string>com.example.vpn.example-iphone</string>
	<key>PayloadOrganization</key>
	<string>vpn.example.com</string>
	<key>PayloadRemovalDisallowed</key>
	<false/>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>A00F372B-49C3-45D4-8C08-AD62076A5BF4</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>
Last edited by iphoting on Thu Jan 18, 2018 2:22 pm, edited 2 times in total.
Top
CHRISLINDSAY
OpenVpn Newbie
Posts: 9
Joined: Thu Jan 18, 2018 1:25 pm

Re: VPN On Demand - 1.2.6

Post by CHRISLINDSAY » Thu Jan 18, 2018 2:19 pm

Many thanks its much appreciated.

So you only use \n and then make sure its all in one line within a text editor?

Did you change the identifier, server and user authentication as per FAQ's?
Top
iphoting
OpenVpn Newbie
Posts: 18
Joined: Thu Apr 04, 2013 8:24 am

Re: VPN On Demand - 1.2.6

Post by iphoting » Thu Jan 18, 2018 2:27 pm

CHRISLINDSAY wrote: ↑
Thu Jan 18, 2018 2:19 pm
 So you only use \n and then make sure its all in one line within a text editor?
Yes.
The \\n is probably required only when using Apple Configurator?
CHRISLINDSAY wrote: ↑
Thu Jan 18, 2018 2:19 pm
 Did you change the identifier, server and user authentication as per FAQ's?
Please see my edited post above: viewtopic.php?f=36&t=25664&p=76164#p76162
Top
User avatar
ordex
OpenVPN Inc.
Posts: 444
Joined: Wed Dec 28, 2016 2:32 am
Location: IRC #openvpn-devel @ libera.chat

Re: VPN On Demand - 1.2.6

Post by ordex » Thu Jan 18, 2018 2:51 pm

iphoting wrote: ↑
Thu Jan 18, 2018 2:27 pm
CHRISLINDSAY wrote: ↑
Thu Jan 18, 2018 2:19 pm
 So you only use \n and then make sure its all in one line within a text editor?
Yes.
The \\n is probably required only when using Apple Configurator?
CHRISLINDSAY wrote: ↑
Thu Jan 18, 2018 2:19 pm
 Did you change the identifier, server and user authentication as per FAQ's?
Please see my edited post above: viewtopic.php?f=36&t=25664&p=76164#p76162
Maybe the FAQ is not 100% clear - I'll ask to revise it a bit. Basically it says:
The procedure is to convert the multi-line data to a single line by replacing line breaks with "\n" (without the quotes). Note that because of this escaping model, you must use "\\" to pass backslash itself.
Which means you have to use "\n" for line break and "\\" when you need a \.
It's a way to escape special characters.
Top
yankee77
OpenVpn Newbie
Posts: 8
Joined: Tue Oct 06, 2015 6:26 pm

Re: VPN On Demand - 1.2.6

Post by yankee77 » Thu Jan 18, 2018 2:55 pm

iphoting wrote: ↑
Thu Jan 18, 2018 1:26 pm
 Well, it looks like the mobileconfig and VoD potions are functioning. What do you mean by “autologin” profile?


Sent from my iPad using Tapatalk
An autologin profile is the name that the openvpn app gives to an openvpn config that has inline certs and keys as opposed to the external certificate. The icon looks like blue circular arrows instead of the red badge. But this is not related to the mobileconfig or VoD, it's just the only thing I've gotten to work so far.

I've played around with different settings and even copied your config format with bundling the p12 as well as adding the cert and key inline, but I still get a hang on connecting...Its frustrating that I can't get any log info.
Top
iphoting
OpenVpn Newbie
Posts: 18
Joined: Thu Apr 04, 2013 8:24 am

Re: VPN On Demand - 1.2.6

Post by iphoting » Thu Jan 18, 2018 3:18 pm

yankee77 wrote: ↑
Thu Jan 18, 2018 2:55 pm
 I've played around with different settings and even copied your config format with bundling the p12 as well as adding the cert and key inline, but I still get a hang on connecting...Its frustrating that I can't get any log info.
@ordex, do you have any pointers on how to obtain client logs for VoD connections?
The OpenVPN Connect app does not show any logs for VPN connections brought up by the iOS VoD component.
Top
CHRISLINDSAY
OpenVpn Newbie
Posts: 9
Joined: Thu Jan 18, 2018 1:25 pm

Re: VPN On Demand - 1.2.6

Post by CHRISLINDSAY » Thu Jan 18, 2018 3:28 pm

Ive managed to get the profile installed however its failing to connect to my apps ip so I presume im back to the same issue where by the embedded p12 is causing a timeout/no connection. Openvpn still saying Disconnected

Any ideas?

I have Credential on Certificate set to the name of my embedded p12 file, doing this allowed the profile to install however no connection it seems

Im running cert and key tags in my custom data also as per your scenario @iphoting
Top
User avatar
ordex
OpenVPN Inc.
Posts: 444
Joined: Wed Dec 28, 2016 2:32 am
Location: IRC #openvpn-devel @ libera.chat

Re: VPN On Demand - 1.2.6

Post by ordex » Thu Jan 18, 2018 3:29 pm

iphoting wrote: ↑
Thu Jan 18, 2018 3:18 pm
yankee77 wrote: ↑
Thu Jan 18, 2018 2:55 pm
 I've played around with different settings and even copied your config format with bundling the p12 as well as adding the cert and key inline, but I still get a hang on connecting...Its frustrating that I can't get any log info.
@ordex, do you have any pointers on how to obtain client logs for VoD connections?
The OpenVPN Connect app does not show any logs for VPN connections brought up by the iOS VoD component.
if the connection is actually started (but then fails for some reason), I thought it would still show something in the standard log.
if the connection is not started at all, that's iOS log that should be checked, because the OpenVPN engine hasn't been reached yet.
Top
User avatar
ordex
OpenVPN Inc.
Posts: 444
Joined: Wed Dec 28, 2016 2:32 am
Location: IRC #openvpn-devel @ libera.chat

Re: VPN On Demand - 1.2.6

Post by ordex » Thu Jan 18, 2018 3:30 pm

if VoD does not work, I'd suggest to set vpn-on-demand to 0 and test that first as a normal autologin profile. Once that works, you can go back to VoD.
Top
yankee77
OpenVpn Newbie
Posts: 8
Joined: Tue Oct 06, 2015 6:26 pm

Re: VPN On Demand - 1.2.6

Post by yankee77 » Thu Jan 18, 2018 3:44 pm

ordex wrote: ↑
Thu Jan 18, 2018 3:30 pm
 if VoD does not work, I'd suggest to set vpn-on-demand to 0 and test that first as a normal autologin profile. Once that works, you can go back to VoD.
Good suggestion. I just tried it, and interestingly, the openvpn app still reads it as a "VPN-On-Demand" profile even though vpn-on-demand is now set to 0. Only difference is that the on demand behavior now doesn't trigger.
Top
iphoting
OpenVpn Newbie
Posts: 18
Joined: Thu Apr 04, 2013 8:24 am

Re: VPN On Demand - 1.2.6

Post by iphoting » Thu Jan 18, 2018 3:48 pm

If you have access to a Mac, plug in your iOS device (+trust) and open Console.app on the Mac and select the iOS device from the list on the left.
Filter messages by the "NIP" process.
The OpenVPN log output will appear under the NIP process output (example snippet) if it is run by the VoD component:

Code: Select all

default	23:39:43.023423 +0800	NIP	LOG: ----- OpenVPN Start -----
OpenVPN core 3.1.2 ios arm64 64-bit built on Jan 14 2018 14:23:32
default	23:39:43.039966 +0800	NIP	LOG: Frame=512/2048/512 mssfix-ctrl=1250
default	23:39:43.052207 +0800	NIP	LOG: EVENT: RESOLVE
Hope this helps. Post the client logs so that we can see what's preventing the connection from succeeding.
Top
CHRISLINDSAY
OpenVpn Newbie
Posts: 9
Joined: Thu Jan 18, 2018 1:25 pm

Re: VPN On Demand - 1.2.6

Post by CHRISLINDSAY » Thu Jan 18, 2018 4:55 pm

Jan 18 16:13:02 Preferences[587] <Warning>: +[VPNBundleController networkingIsDisabled]: Airplane mode: 0, WiFi Enabled: 1
Jan 18 16:13:02 nesessionmanager[261] <Notice>: NESMVPNSession[OpenVPN: The Client:5EE7F09B-AB81-4955-9DFE-FEB3B204FB75]: Received a start command from Preferences[587]
Jan 18 16:13:02 nesessionmanager[261] <Notice>: NESMVPNSession[OpenVPN: The Client:5EE7F09B-AB81-4955-9DFE-FEB3B204FB75]: status changed to connecting
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=<null>
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: path initialization, not reacting
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Logfile: /private/var/mobile/Containers/Data/PluginKitPlugin/606BAFC8-D41A-408B-A96C-DE0A562EBC0C/tmp/openvpn-current.ovpnlog
Jan 18 16:13:02 configd[30] <Notice>: network changed
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:02 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:13:02 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:13:19 corecaptured[588] <Warning>: CCProfileMonitor::freeResources done
Jan 18 16:13:19 corecaptured[588] <Warning>: Got an XPC error: Connection invalid
Jan 18 16:13:19 corecaptured[588] <Warning>: CCDataTap::profileRemoved, Owner: com.apple.iokit.IO80211Family, Name: AssociationEventHistory
Jan 18 16:13:19 corecaptured[588] <Warning>: CCLogTap::profileRemoved, Owner: com.apple.driver.AppleBCMWLANCore0, Name: DatapathEvents
Jan 18 16:13:19 corecaptured[588] <Warning>: CCLogTap::profileRemoved, Owner: com.apple.iokit.IO80211Family, Name: OneStats
Jan 18 16:13:19 corecaptured[588] <Warning>: CCIOReporterFormatter::refreshSubscriptionsFromStreamRegistry clearing out any previous subscriptions
Jan 18 16:13:19 corecaptured[588] <Warning>: CCIOReporterFormatter::addRegistryChildToChannelDictionary streams 7
Jan 18 16:13:19 corecaptured[588] <Warning>: CCLogTap::profileRemoved, Owner: com.apple.driver.AppleBCMWLANCore0, Name: DriverLogs
Jan 18 16:13:19 corecaptured[588] <Warning>: CCDataTap::profileRemoved, Owner: com.apple.driver.AppleBCMWLANCore0, Name: StateSnapshots
Jan 18 16:14:11 timed[276] <Notice>: (Note ) CoreTime: Received time 01/18/2018 16:14:10±0.14 from "NTP"
Jan 18 16:14:11 timed[276] <Notice>: (Note ) CoreTime: Want active time in 12.16min. Need active time in 8303.82min. Remaining retry interval: 14.966667min.
Jan 18 16:14:11 UserEventAgent[23] <Error>: validateAndAddDefaults(com.apple.timed): End Time (inf) > now (537984851.7) + BACKGROUND_TASK_AGENT_JOB_WINDOW_MAX_TIME_FROM_NOW_SEC (3024000.0) + BACKGROUND_TASK_AGENT_JOB_TIME_ERROR_MARGIN (300.0)
Jan 18 16:14:11 timed[276] <Notice>: (Error) CoreTime: Error requesting proactive time check job
Jan 18 16:14:31 nesessionmanager[261] <Notice>: NESMVPNSession[OpenVPN: The Client:5EE7F09B-AB81-4955-9DFE-FEB3B204FB75]: Received a stop command from Preferences[587] with reason 1
Jan 18 16:14:31 nesessionmanager[261] <Notice>: NESMVPNSession[OpenVPN: The Client:5EE7F09B-AB81-4955-9DFE-FEB3B204FB75]: status changed to disconnecting
Jan 18 16:14:31 configd[30] <Notice>: network changed
Jan 18 16:14:51 nesessionmanager[261] <Notice>: NESMVPNSession[OpenVPN: The Client:5EE7F09B-AB81-4955-9DFE-FEB3B204FB75]: status changed to disconnected, last stop reason Stop command received
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:14:51 NIP[270] <Warning>: NIP: Network status changed: key kind=1
old=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
new=
status = satisfied
reasonCode = 0
reason = Path is satisfied
isExpensive = NO
Jan 18 16:14:51 NIP[270] <Warning>: changeDefaultPath: different paths but same status, not reacting.
Jan 18 16:15:02 installd[389] <Notice>: 0x1f115000 -[MIClientConnection lookupUninstalledWithOptions:completion:]: Lookup uninstalled requested by atc (pid 381) with options (null)
Jan 18 16:15:02 notification_proxy[383] <Error>: 0x1f197000 -[MNPLockdownConnection receiveMessage]: lockdown_receive_message error!
Jan 18 16:15:02 installd[389] <Error>: 0x1f081000 +[MIContainer allContainersForIdentifier:options:error:]: Failed to find VPN plugin bundle container with ID net.openvpn.OpenVPN-Connect.vpnplugin : Error Domain=MCMErrorDomain Code=21 "(null)"
Jan 18 16:15:07 ondemandd[392] <Error>: -[ODRBackgroundMaintenance startBackgroundMaintenanceOperations]
Jan 18 16:15:07 installd[389] <Error>: 0x1f081000 +[MIContainer allContainersForIdentifier:options:error:]: Failed to find VPN plugin bundle container with ID net.openvpn.OpenVPN-Connect.vpnplugin : Error Domain=MCMErrorDomain Code=21 "(null)"
Top
CHRISLINDSAY
OpenVpn Newbie
Posts: 9
Joined: Thu Jan 18, 2018 1:25 pm

Re: VPN On Demand - 1.2.6

Post by CHRISLINDSAY » Thu Jan 18, 2018 5:25 pm

Heres the mobileconfig

Code: Select all

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>PayloadDescription</key>
			<string>Configures VPN settings, including authentication.</string>
			<key>PayloadDisplayName</key>
			<string>VPN (OpenVPN: Client)</string>
			<key>PayloadIdentifier</key>
			<string>com.apple.vpn.managed.38D567EE-62B9-4D6D-8313-9BA8946C7C12</string>
			<key>PayloadOrganization</key>
			<string>Client</string>
			<key>PayloadType</key>
			<string>com.apple.vpn.managed</string>
			<key>PayloadUUID</key>
			<string>A1430963-8A6E-44F8-9360-0B0026FB6BE3</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<key>UserDefinedName</key>
			<string>OpenVPN: Irish Water</string>
			<key>VPN</key>
			<dict>
				<key>AuthName</key>
				<string>USERNAME</string>
				<key>AuthenticationMethod</key>
				<string>Certificate</string>
				<key>OnDemandEnabled</key>
				<integer>0</integer>
				<key>OnDemandRules</key>
				<array>
					<dict>
						<key>Action</key>
						<string>Disconnect</string>
						<key>InterfaceTypeMatch</key>
						<string>WiFi</string>
						<key>SSIDMatch</key>
						<array>
							<string>home</string>
						</array>
					</dict>
					<dict>
						<key>Action</key>
						<string>Connect</string>
						<key>InterfaceTypeMatch</key>
						<string>WiFi</string>
					</dict>
					<dict>
						<key>Action</key>
						<string>Ignore</string>
						<key>InterfaceTypeMatch</key>
						<string>Cellular</string>
					</dict>
					<dict>
						<key>Action</key>
						<string>Ignore</string>
					</dict>
				</array>
				<key>PayloadCertificateUUID</key>
				<string>E49997C2-9520-4D35-A1DD-3C4738F62EA5</string>
				<key>RemoteAddress</key>
				<string>DEFAULT</string>
			</dict>
			<key>VPNSubType</key>
			<string>net.openvpn.connect.app</string>
			<key>VPNType</key>
			<string>VPN</string>
			<key>VendorConfig</key>
			<dict>
				<key>ca</key>
				<string>-----BEGIN CERTIFICATE-----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\n79qHv1pU07XyipfXM2s1NcGfLB7HTgX6/SJ3\n-----END CERTIFICATE-----\n</string>
				<key>cert</key>
				<string>-----BEGIN CERTIFICATE-----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\nCJG583MrCFad0Xwi7NLxquqY3g69Gr3Dls0s8MIwsWA9DKfw4VmcXrw=\n-----END CERTIFICATE-----\n</string>
				<key>client</key>
				<string>NOARGS</string>
				<key>comp-lzo</key>
				<string>NOARGS</string>
				<key>dev</key>
				<string>tun</string>
				<key>key</key>
				<string>-----BEGIN ENCRYPTED PRIVATE KEY-----\nMIIFDjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIdK9wJfml1G0CAggA\nMBQGCCqGSIb3DQMHBAgMnghpqt4+BwSCBMgbk5cERN1VvmPi7hw83lI8+YZg02ch\nxYLERnrddJYKSwvwYGIUyG8a47vNbh0G9bXNPTZBKNelKTsjDYGNx/XkCJ/UAFoq\nFhrXCMAi6AILFx/5cYiWSDNPMdpYLcP07O5qa5571IhdwZTspRuBcJG6sTfEyert\nyP7+fEMoErjw77m+vGaf6L2wUVgdYld9YjWmXjbP9vlv9Rze21zMzQRiV5DwOM+N\nh8z+4JPkhfVbhOIuOPUGY+fb4GxtHJntbJMU0pRZccSlWyPvvory/U8bHZo7XL7J\nzAPytlTt1yY0QTjYmlDW06IJjpYNjSNt5N/34tWG4NcKypAXvykvdOP7P72gbFXI\nhm2sRuYhdwWFEEKFPTFqVON8iFZTfMwcElcBS8FpzXus17rj4j9GV6Jyo5AkFsiB\nMclFsd6Zt2lphr5Ln0Na37/RWpxmPEY8YRv5qpzacaDVyTNHLRSpltHulj0MjO7T\nh1eRCE4JhlRjDIYjZHkwuU/BWqigrzUQLhRmDGOjFilFSXMmCgnXKuq88+dx4aNp\n9xWcb07lYUNd1dGVBZDFDY+JH11KjTN/032jWPmykIBQ9FMBvSi4QmzAb4RLam6U\nmr4gFm6Lb3Ip+/dxhzJI0F7OyyfeDupHcpMat7h4TC1AYH1lGff+lFJ4rgmre9dn\ndKAfZgVKQb298XfZEM6EaRRzfYhgCnPsr88dHS6tEf2wLVtFXpAuy10mFE7H1/Z3\nNVIxXG2at1vTO9dPiDoxnkwqmrkShZ+P3d24PMFPKM3zXVhXqVGyJWRKsWG8EM3J\nwCtk58P/nlXn5WzFDxq5MkLYc7UuCByViZfm4NN9WucCd8kixKeJrPtbMGRRbByw\nukr3vnVwjtM1yg1qkHZsKx3u/q1o3TpJRkknCkWgaCIBW9ibyI7ZlCfmhtNbLrBU\ntkGgJ8H7Jkte6Sv3CQcroCic8x/2nR9JwouQYdYEci3m/qPeCykD6RJT6l2POhTr\ntQAb73uKgjdUH82QvJlUGaXjsB2T59qIuQGSYAadD0971cQbdhGufudK5wxrBFRc\n/il7iQTOSvKaIiyDWkNfXXzsYes9YhxVZBw6XPPkwUmUhomyhmVJgmMVXZE7tj68\nvhBZjUQ/tVFNhqW15ZTXupG0f4mVrGvQ7vivLfLp/elBG2mEnGOOUs5FD2V4jjHQ\nnoK4EknWJ/ibSiHGZxCdLfHW3o97Hk7zlJY8zmF0m/UXbnpenaVXxSzbRwRiZgBi\n37vlSoQ3cwkNdV+EMZ2X5RF/udeF9haJt+2TDeRNJHAioGuXg32Fe5nq5z5RKKJu\n9kom4TulM+YUC20rOAQ4wnTK6RG0c9kax4Tfzig/hVLAQHwfyFzAkXBwtPt5hqwQ\n+gThNwW4j2VFSr/4e8fKA6XvtiiPPBCbs5tiq/xjOgD6sAn2jT1AXPvOShj7P0bD\nLQXdAaicdzrNIyLFKL1mFCx/BMptEKxaZ1HM1MBwIdoEvE4mijoQE4ekXbUHlxML\nMPlgXMfE/FgdDUc+MwtK/s2e3euHs9GRSqhFxaGNplrNfDDAHMUDWlbPy/k3bFcp\nGjWMWYnFHM7e9/K3gq/aC28No8eKWAO+T7/t8d3P9y+m0NvM86wnR2aMPvTYg5Mx\nI9k=\n-----END ENCRYPTED PRIVATE KEY-----\n</string>
				<key>key-direction</key>
				<string>1</string>
				<key>remote</key>
				<string>IP PORT TCP</string>
				<key>tls-auth</key>
				<string>-----BEGIN OpenVPN Static key V1-----\n54a300c733a6760b32f326f2d4ebe86f\n3f21f10c4d589ee192853be0b0cbc5a7\n9142fdcc9a1396626db1075708f58c16\n6023eed5000ae21b2354e3e12726bd65\n34d18d1f52cbc0dc8461e362e6069d63\n0242caca9a76df4ac4cae67388436a1c\n0711e9e7d766c6f836111b2f6626936f\n4569481927deb285cadb896fcc775f10\n9077c1596bbda64842d28e87918d98d8\n6fa81d2b1d12a75942beab51d43c30a0\n69740d3416cc313f91a2df56a4ccd903\n9e98d474085e3f2a9935a9af28a7b9e8\n95b0b773e56283a20d331c5928d449b2\n7f68b3f315c1cd4dac6da09162ba5b8e\nd500379f7973aa3b59a0a185357a8ccc\nf755a0db75c5298dc5699a9fcfa3956b\n-----END OpenVPN Static key V1-----\n</string>
				<key>verb</key>
				<string>3</string>
			</dict>
		</dict>
		<dict>
			<key>Password</key>
			<string>password</string>
			<key>PayloadCertificateFileName</key>
			<string>client.p12</string>
			<key>PayloadContent</key>
			<data>
			MIIJmQIBAzCCCV8GCSqGSIb3DQEHAaCCCVAEgglMMIIJSDCCA/8G
			CSqGSIb3DQEHBqCCA/AwggPsAgEAMIID5QYJKoZIhvcNAQcBMBwG
			CiqGSIb3DQEMAQYwDgQI4wGG18iEFp8CAggAgIIDuMgMKwez+oxB
			5v6Skomve3w4QnGzSOo1r+3ZQnQLidUHKdE67DqEkrPpz+hmUc1c
			vp9f84Bc0cQmU8TZKyu3rJ4xskNu9SGULfUq65acxobOcIGHoozF
			APEbgnZIq5XD417QBNY3l0dJpgoKKh4j7yEy0gIdxYootrRdyrrO
			xr/IVw8v/IQGuwLtMSepQd1BuXuOqkLuD5Yj4El+swf3NbYjIJVq
			I+VYfPfFB8EjFaZA4WK/yhmhpqQaEYIB0eD5uZm3Kd0ot/g096uM
			vgG2DbzeyvhzdJtYBRUZ26x78m6MdRvRzyJpp4fm5ErU+muK4X30
			hZckKcwZkmL9mTgPjzABTwHcc3T5q6DiR5TKpPN38J4JyzeFJI5u
			Tr9uZSVYULk94OHzYQbtVgii21GZ+kqmvFn4iRIKrZEfc2lqWe/V
			uwHXDe9F0My3O6NS/1pMgtAxCc+MWY5B9a6H482YPAEfAFxCVrDZ
			KF02k0lrYucZljtVz/M6VY8iW/XaJfgfTZyOG4ZLKCFfduw8XYao
			2Spc8GEiMtLFNuViKr3CsdE9MKaQVC3xmb/x1of15RRFssgu6e29
			apRNRzFCXrDmh9mKKHY46hV/n7zpKdoaroATFkBRGVt8ZHJBzYff
			S/wdGQN1WFeayL3qj/XXmUHMA2kly88QJ6+EETgGt4PAM9ALdscT
			vZNUjd16JsYKuf2xr/7dTMscLZLnjpw66h8Wy2gpQqc7E47/VCrO
			uToLMK7+9rd4P2s7Zbu1+wBq2T8sfbYcDRWLQlr6fWqvjZd94b7M
			yz4UGZEEFn6Glr/kJrS+vGGRKkeY0jctvUE7OZ1vyU3w992Ivyod
			aFUpTVjv+OGoLE5JIANyRzDgPu6uH+DPwjlmZyU9g8VIWIVm4LQz
			9tERZQ3WdXRNG3fROrSzuz6133SRG+izI+oIZ75VXDCWWZh5ODer
			aJrwZSc0ged3VKoNUvBH+OYS6KPT44pJQ9WxPVm7yOuqAcGzG2Yg
			RxvRxidlW6/zD99+Dg8xbzkQtgerKU2DWAEoXvy6V7c3tBR2QIRL
			xHwkRs435CQvZA1LH3+Zjn1T8T7qqZVP10wy6TiJ5n2BJph9I0m8
			zrp4+ROOgYrIZNvQOH72lZgowQ/iDRNq2hxwpOA1hAoEw9LPvVrx
			345Ua0VV1I1DXQwLwBEYRjmniIpPdB3mK8hF95S5/FVZuUsa0Q3+
			/90rMPDO6kCy1sR3cQTiccB8bodni1c5ki0YPr139yvWddz2MtQz
			LCHVm+YqAKAwggVBBgkqhkiG9w0BBwGgggUyBIIFLjCCBSowggUm
			BgsqhkiG9w0BDAoBAqCCBO4wggTqMBwGCiqGSIb3DQEMAQMwDgQI
			qnc6OI8ubCECAggABIIEyJXP4w0JqL2LAY/ucn9gJ7/X9gU7lFgh
			DWXDF8tTeeYzP18q/KWJc9nK3MJiYlQ23Bmr1btaeLQMNcoGc8LF
			K5H/giMj7L6Tq6DiEC/johJEQO8kzpMuEOPfLokESEeHF1RfLsw7
			4X+TkF+o0AjGbgNCaAJEmL5Tx1kGXi/tU7rk5iRblIloHK0LTwjw
			7omnZDFiiY8eH1AlGqZclRCOnI8fkHrS5zFb8LkevsAeBgcTY9QT
			DWgET8T5dbb6YJPfY7yn8egtHU7mtagN7LzX86bF68xFAiAqCgIv
			f6hkMgJHy1JIdhTD+A07JpFiKhsARK7zeT01sDQEVGAxby00Zhj1
			svawjezd2882SLYljwjYRbmwQ0yxdVeBnGwtxFkxv32kWVUcuuHr
			lBzN6I6tPwXlGFvKahJzvZsU3Q3OtTFGxgZpmcfJ6Uym9Q2jZmEq
			LFPo8e3A+EYFHAinf/EJGfhjMdvYaICvyfz6bxLcEfLHS0Y2FQMn
			WyIvgO9wR4APjlLn1MyHR2zjI989s1E67sIUYK2Dzrq0NyYJqSkg
			Hb8/pRzMTLZtr9TUJr/i8PSAmKEAWyXoJEBBe5LrSfPCYfAaSC5D
			eu3KB5vT0l+c18Z1IB2W+xv0atbuPrCQqyGSPaV69BLkqBp5wKnl
			G4eXIoyzS2nX/JTXSiQ2C3zAicfROGR62wjwwImMP+s3zOa8mJPO
			4gSbs2+2Nwb15y4TJ25s/rbsbLWIVzZAGLOP+6quHLsQ3W05QZeU
			XQxagkxa2aa/Vb+P1qGPsHKTrcEIPopAKg0FyR1kUSkPmdlairoI
			LlBC+K/NYsbkiFXYjwMS5r3wltpVaIOikmi1g0KMjjWeGPpij3mS
			W9oXl63124hfYnFey4eydhz+Cux/KeThWwg2B3+QmISYJlAEDHJG
			4ldKUiizj/tTIytBwtaD17BQmOY4aNLugAyB0IoHAYGHkPaWHu8/
			BcvEG83Cvm93jkFPDzCL9KxUSx95yDHKGtq/6cuC3swEeg+uAueM
			s7iL1DnX+9YvRl+wCJEoESFuxUdK74izUIS9RvH5MY4IWqV7IIuc
			htRms6nWpjk5lLcuYZjbnDMTfUzMNbA58uVefEjUM9upnuU6pCQv
			RsOcWS7pn3Xzz5Wbarc0UfRjg0kJcMdYSdeji/hN/yzLJzhy0gAk
			jXwRAj58smxd8/fIAgTM1gK3K/UtGS7ublQAF6qoTLHrr5b/cd+F
			j1OB/UuwbsOFqBJiUmxAuYDGvK4bWvOk6kC845T1Q2nyqKXAhk+/
			Gs64Uh6NrVPNusdveNgH5+8tF61GbQaRo03Jk9u5IB9FwV1Qqd8t
			OeeJaQ6z9agOvD1mqzzczByzz1lwd/1ooiYz/B/ENS8K1ipknsce
			fngQUUzjSnOXZHYQkOWpBag7F7rlJpVXyhna+7YIHYp4+Nxs7V+u
			0phfTxq+VLagyNGqfql0PSFjMyUumqP4o/CwjBJSnlCW5+ixJLZf
			c5N93bAL3WC3Ns4Wz+5BTt9lczgfuO0w3fXHEC6WzikK7AcnnmWe
			fQO2IBhmjZ4pYRvS8o29VSkO8VdfFhh1UiFAEeLw/EHQV8ePTF6w
			APDIp1Uy+6TGoSJxQ2clhb/CtsDFWBnuZ+D3q2sInzElMCMGCSqG
			SIb3DQEJFTEWBBTg3tX4SXDFUeWBh7pT+YzHGRkwHDAxMCEwCQYF
			Kw4DAhoFAAQUT/b5VGB0frZjcPE4TQCQsMntAXgECC6M3tZlsbIM
			AgIIAA==
			</data>
			<key>PayloadDescription</key>
			<string>Adds a PKCS#12-formatted certificate</string>
			<key>PayloadDisplayName</key>
			<string>client.p12</string>
			<key>PayloadIdentifier</key>
			<string>com.apple.security.pkcs12.E49997C2-9520-4D35-A1DD-3C4738F62EA5</string>
			<key>PayloadType</key>
			<string>com.apple.security.pkcs12</string>
			<key>PayloadUUID</key>
			<string>E49997C2-9520-4D35-A1DD-3C4738F62EA5</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
		</dict>
	</array>
	<key>PayloadDescription</key>
	<string>Irish Water VPN Profile</string>
	<key>PayloadDisplayName</key>
	<string>CLIENT_VPN</string>
	<key>PayloadIdentifier</key>
	<string>com.amtsybex.irishwater</string>
	<key>PayloadOrganization</key>
	<string>CLIENT</string>
	<key>PayloadRemovalDisallowed</key>
	<false/>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>7D123020-5DF2-457D-887D-F78A9808A450</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>
Top
Post Reply

Return to “OpenVPN Connect (iOS)”